Privacy Policy — How bj660 Protects Your Personal Data
This Privacy Policy explains what personal information bj660 collects from players and visitors, how that information is used, how it is stored securely, and what rights you have regarding your data. By using the bj660 platform, you acknowledge that you have read and understood this policy. bj660 is committed to handling your personal data with transparency, care, and full accountability.
Six Core Privacy Commitments
These six principles guide the way bj660 collects, uses, and protects your personal data. The full detail of each commitment is explained in the sections that follow.
Minimal Data Collection
bj660 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data beyond what is required to deliver a safe and reliable gambling service to players in Bangladesh.
AES-256 Encryption
All personal data transmitted between your browser and the bj660 platform is protected by industry-standard TLS 1.3 encryption. Data stored on bj660 servers is encrypted at rest using AES-256. Your payment details, identity documents, and account credentials are never stored in plaintext.
No Sale of Personal Data
bj660 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is shared only with service providers who are contractually bound to use it solely for the purpose of delivering services on bj660's behalf.
Player Rights & Control
Registered bj660 players have the right to access, correct, and request deletion of their personal data, subject to retention obligations under applicable anti-money-laundering and financial regulations. Data access requests are processed within 30 days of receipt via our support team.
Transparent Cookie Use
bj660 uses essential cookies to maintain your session and remember your preferences, and analytics cookies to understand how players use the platform so we can improve it. We do not use third-party advertising cookies or behavioural tracking cookies that follow you across other websites.
Clear Retention Limits
bj660 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Transaction records and identity verification documents are retained for a minimum of five years following account closure, in accordance with anti-money-laundering obligations.
Information We Collect
bj660 collects personal information from players and visitors in three broad categories: information you provide directly, information generated automatically when you use the platform, and information we receive from third-party verification and payment service providers.
Information You Provide Directly
When you register a bj660 account, make a deposit, request a withdrawal, contact our support team, or participate in a promotion, you may provide the following categories of personal information:
- Identity data: full legal name, date of birth, nationality, and gender as recorded on your official identity document.
- Contact data: email address, mobile phone number (for SMS verification and 2FA), and residential address including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), and postcode.
- Identity verification documents: scanned copies or photographs of your Bangladesh National Identity Card (NID), passport, or driving licence, as submitted to complete the KYC (Know Your Customer) process.
- Financial data: bKash account number, Nagad account number, Rocket account number, Upay account number, or bank account details provided for deposit and withdrawal purposes. bj660 does not store full card numbers for any Visa or Mastercard transactions — these are handled directly by the payment processor.
- Account credentials: your chosen username and hashed password. bj660 never stores passwords in plaintext.
- Support communications: the content of any messages, emails, or live chat transcripts exchanged with the bj660 support team.
Information Collected Automatically
When you visit the bj660 website or use the bj660 mobile-optimised platform, the following technical data is collected automatically:
- Device and browser data: IP address, device type (mobile, tablet, or desktop), operating system, browser type and version, and screen resolution.
- Usage data: pages visited, time spent on each page, game sessions initiated, bets placed, and navigation paths through the bj660 platform.
- Session data: login timestamps, session duration, and logout events, used for security monitoring and responsible gaming oversight.
- Geolocation data: approximate country and city-level location inferred from your IP address. bj660 does not request GPS-level device location data.
- Cookie and local storage data: see the Cookies section of this policy for full details.
Information from Third Parties
bj660 may receive additional personal information about you from trusted third-party service providers in the following circumstances:
- Identity verification providers: where bj660 uses a third-party KYC service to verify your identity documents, that provider may return a verification status, confidence score, and summary of verified data points.
- Payment processors: bKash, Nagad, Rocket, and other payment service providers may confirm transaction status, account holder name, and account registration details to bj660 to match your payment account with your registered bj660 identity.
- Fraud prevention services: third-party fraud screening services may provide risk scores or flags associated with your IP address, device fingerprint, or payment method, which bj660 uses to protect the platform from fraud and money laundering.
Processing your identity, contact, and financial data is necessary to perform our contract with you as a registered bj660 player.
KYC and transaction record retention are required by applicable anti-money-laundering regulations.
Fraud prevention, platform security monitoring, and analytics are processed under bj660's legitimate interest in operating a safe platform.
Marketing communications and non-essential analytics cookies are processed based on your explicit consent, which you may withdraw at any time.
How We Use Your Information
bj660 uses the personal information it collects for the following specific purposes. We do not use your personal data for any purpose that is incompatible with the reason it was originally collected without first obtaining your consent.
Account Management & Service Delivery
Your identity and contact data are used to create and maintain your bj660 player account, verify your age and identity, process deposits and withdrawals, and communicate important account-related information such as transaction confirmations, security alerts, and policy updates.
Identity Verification & KYC Compliance
bj660 is required to verify the identity of all players prior to processing their first withdrawal, and may conduct enhanced due diligence on accounts that show unusual transaction patterns. Identity documents submitted for KYC purposes are used solely for verification and are not shared with any third party except authorised identity verification service providers acting on bj660's behalf.
Fraud Prevention & Security
Technical data including IP addresses, device fingerprints, login histories, and transaction patterns are analysed to detect and prevent fraud, multi-accounting, bonus abuse, money laundering, and unauthorised access to player accounts. This processing is carried out on the basis of bj660's legitimate interest in maintaining a secure platform for all players.
Responsible Gaming
Session duration data, deposit frequency, wagering patterns, and other behavioural signals are monitored by bj660's responsible gaming team to identify players who may be showing signs of problem gambling. Where such signs are detected, bj660 may make proactive contact, apply temporary deposit limits, or prompt the player to review their responsible gaming settings. This processing is carried out in the interest of player welfare and is not used for any commercial profiling purpose.
Customer Support
Support communication records — including live chat transcripts and email correspondence — are retained to provide consistent and accountable customer service, investigate disputes, and improve the quality of bj660's support operations. Support records are accessible only to authorised bj660 support and compliance team members.
Marketing Communications
With your explicit consent, bj660 may use your email address and mobile number to send promotional communications about new games, seasonal offers (such as Eid bonuses, Pohela Boishakh free spins, IPL and BPL cricket cashback promotions, and Victory Day tournaments), and platform updates. You may withdraw consent for marketing communications at any time by using the unsubscribe link in any marketing email or by contacting support at [email protected].
Platform Analytics & Improvement
Aggregated and anonymised usage data is used to understand how players navigate the bj660 platform, which game categories are most popular, where technical issues arise, and how the user experience can be improved. This analytics processing does not involve individual-level profiling and cannot be used to identify any specific player.
Marketing Opt-Out
You can unsubscribe from bj660 marketing emails at any time. Your consent status does not affect your ability to use the platform or claim non-marketing bonuses to which you are entitled.
No Automated Decision-Making
bj660 does not make any fully automated decisions that produce legal or similarly significant effects on individual players without human review. Fraud risk flags generated by automated systems are always reviewed by a qualified compliance team member before any account action is taken.
Sharing Your Information
bj660 does not sell your personal data. We share personal information with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose.
Payment Service Providers
To process deposits and withdrawals, bj660 shares the minimum necessary payment and identity information with your chosen payment service provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each of these providers processes your payment data in accordance with their own privacy policies and applicable financial regulations. bj660 selects payment partners who maintain industry-standard security certifications.
Identity Verification Providers
To fulfil its KYC obligations, bj660 may transmit identity document images and associated metadata to an authorised third-party identity verification service. This provider processes the data solely to return a verification result to bj660 and is prohibited from retaining your identity documents beyond the period required to complete the verification check.
Game Technology Providers
Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session token to deliver their game content within the bj660 platform. These providers do not receive your full name, contact details, or payment information. Game session data recorded by the provider (such as bet amounts and game outcomes) is accessible to bj660 for dispute resolution purposes.
Fraud Prevention & Compliance Services
Technical identifiers such as IP addresses, device fingerprints, and transaction metadata may be shared with third-party fraud screening services to assess risk and protect the platform. These providers act as data processors under binding data processing agreements and are prohibited from using bj660 player data for their own commercial purposes.
Legal & Regulatory Disclosure
bj660 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or binding regulatory direction. Where legally permitted to do so, bj660 will notify the affected player of any such disclosure request before complying.
Corporate Transactions
In the event of a merger, acquisition, or sale of all or part of bj660's business, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any change in data controller before their data is transferred, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
| Recipient Category | Purpose |
|---|---|
| Payment Providers | Deposit & withdrawal processing |
| KYC Providers | Age & identity verification |
| Game Studios | Game session delivery |
| Fraud Screening | Platform security & AML |
| Regulators / Law Enforcement | Legal obligations only |
| Acquiring Entities | Corporate transactions (notified) |
Data Processing Agreements: All third-party service providers who process personal data on bj660's behalf are required to sign a data processing agreement that limits their use of that data to the purpose for which it was shared and mandates appropriate technical and organisational security measures.
Data Security
bj660 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes the following controls:
Encryption in Transit and at Rest
All data transmitted between players' devices and the bj660 platform is encrypted using TLS 1.3. Sensitive data stored on bj660 servers — including identity documents, financial records, and hashed credentials — is encrypted at rest using AES-256. Encryption keys are managed using a dedicated key management system with strict access controls.
Access Controls
Access to player personal data within bj660's internal systems is restricted on a need-to-know basis. Staff members are granted the minimum level of system access required to perform their role. All internal access to player records is logged and reviewed periodically by bj660's security team. Administrative access to production systems requires multi-factor authentication.
Penetration Testing & Vulnerability Management
bj660's platform undergoes regular security assessments conducted by independent security professionals. Identified vulnerabilities are triaged, prioritised, and remediated within defined timeframes based on severity. Critical vulnerabilities that could expose player data are treated as the highest priority and remediated immediately.
Incident Response
bj660 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bj660 will notify affected players within 72 hours of becoming aware of the breach, providing details of the nature of the incident, the categories of data affected, the likely consequences, and the steps bj660 has taken to address the breach.
Your Responsibility
While bj 660 takes all reasonable steps to protect your personal data, you also play an important role in keeping your account secure. You should choose a strong, unique password for your bj660 account, enable two-factor authentication where available, never share your login credentials with any third party, and log out of your account when using a shared or public device. bj660 will never ask you for your password via email, live chat, or any other channel.
Third-Party Security Standards
All third-party service providers who process personal data on bj660's behalf are required to demonstrate compliance with recognised security standards as a condition of their engagement. Payment service providers such as bKash and Nagad maintain their own regulatory certifications under Bangladesh Bank's payment system oversight framework.
Data Retention
bj660 retains personal data for the period necessary to fulfil the purpose for which it was collected, or for longer where required by applicable law or regulation. The retention periods below reflect both operational requirements and legal obligations under anti-money-laundering and financial record-keeping rules.
Active Accounts
While your bj660 account remains active, bj660 retains all personal data associated with your account — including identity data, contact data, transaction records, game session logs, and support communications — to deliver the service and meet ongoing compliance obligations.
Closed or Dormant Accounts
Following account closure or the application of dormant-account status, bj660 retains identity verification documents and financial transaction records for a minimum period of five years. This retention period is mandated by anti-money-laundering regulations and cannot be reduced at a player's request. After the mandatory retention period has elapsed, retained data is securely deleted or anonymised.
Support Communications
Live chat transcripts, email correspondence, and other support communications are retained for three years following the date of the conversation. Dispute-related communications are retained for the duration of the relevant dispute resolution process plus an additional two years.
Analytics Data
Anonymised analytics data — from which no individual player can be identified — is retained indefinitely for platform improvement purposes. Consent-based analytics data associated with individual sessions is deleted or anonymised within 26 months of collection.
Marketing Consent Records
Records of your marketing consent or opt-out are retained for the duration of your account plus three years thereafter, to demonstrate compliance with applicable direct-marketing regulations.
| Data Category | Retention Period |
|---|---|
| Identity & KYC Documents | 5 years post-closure (AML requirement) |
| Transaction Records | 5 years post-closure (AML requirement) |
| Game Session Logs | Duration of account + 2 years |
| Support Communications | 3 years from date of conversation |
| Dispute Records | Resolution date + 2 years |
| Analytics (session-level) | 26 months from collection |
| Marketing Consent Records | Account closure + 3 years |
| Anonymised Analytics | Retained indefinitely |
Secure Deletion: When a retention period expires, personal data is either permanently deleted using cryptographic erasure or rendered irreversibly anonymous. bj660 does not archive personal data beyond its defined retention period.
Your Privacy Rights
As a bj660 player or site visitor, you have the following rights in relation to the personal data that bj660 holds about you. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. bj660 will respond to all rights requests within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data that bj660 holds about you, along with information about the purposes for which it is processed, the categories of data held, the recipients with whom it has been shared, and the applicable retention period. bj660 will provide this information in a clear, structured format free of charge for the first request in any 12-month period.
Right to Rectification
If any personal data that bj660 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For data that you can update directly in your bj660 account dashboard (such as your contact email or phone number), we encourage you to make corrections there. For identity data that requires document re-verification, please contact support with the relevant updated documentation.
Right to Erasure
You may request the deletion of personal data that bj660 holds about you where that data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other lawful basis for processing, or where the data has been unlawfully processed. The right to erasure does not apply to data that bj660 is required to retain by law — specifically, identity verification documents and transaction records subject to the five-year AML retention obligation cannot be erased before that period expires.
Right to Restrict Processing
You may request that bj660 restrict the processing of your personal data — meaning that your data is stored but not actively processed — where you contest the accuracy of the data (pending verification), where you have objected to processing (pending determination), or where processing is unlawful but you prefer restriction to erasure.
Right to Data Portability
Where bj660 processes your personal data on the basis of your consent or to perform a contract with you, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you may transfer it to another service provider.
Right to Object to Marketing
You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving your objection, bj660 will stop sending marketing communications immediately and update your consent record accordingly. This does not affect transactional communications (such as deposit confirmations or security alerts) which are not marketing communications.
Identity Verification Required: To protect your privacy and prevent unauthorised data requests, bj660 must verify your identity before actioning any data rights request. Requests made without sufficient identity verification cannot be processed.
Updates to This Policy
bj660 reviews and updates this Privacy Policy periodically to reflect changes in applicable law, updates to our data processing practices, new service offerings, or refinements to our security programme. The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made.
Notification of Material Changes
Where a change to this Privacy Policy materially affects the way bj660 processes your personal data — for example, introducing a new category of data sharing, changing the lawful basis for a processing activity, or reducing your privacy rights — bj660 will notify affected players by email to their registered address at least 14 days before the change takes effect. The notification will clearly describe the nature of the change and its likely impact.
Non-Material Changes
Corrections to typographical errors, clarifications that do not alter the substance of any clause, updates to the list of payment partners or game providers, and formatting improvements may be made without advance notice and take effect immediately upon publication on this page.
Your Continued Use
By continuing to use the bj660 platform after the effective date of any Privacy Policy update, you acknowledge that you have reviewed the updated policy. If you do not agree to the revised policy, you should cease using the bj660 platform and contact support to close your account. bj660 will retain your data for the applicable mandatory retention periods following account closure regardless of your agreement or disagreement with the revised policy, where retention is required by law.
Contact for Privacy Queries
If you have any questions about this Privacy Policy, about the personal data that bj660 holds about you, or about exercising your privacy rights, please contact our data privacy team at [email protected]. Our team is available 24 hours a day, 7 days a week, and aims to respond to all privacy queries within 2 business days. All privacy communications should be conducted in English to ensure accurate record-keeping.
Version History
v3.1 — January 2026 — Current version
v3.0 — September 2025 — Added data portability rights section
v2.0 — March 2025 — Updated payment provider list
Questions About Your Privacy? We Are Here
Our support team is available 24/7 to answer any questions about your personal data, your privacy rights, or how bj660 keeps your account secure. You can also explore our full game library, review our Responsible Gaming tools, or head to the bj660 Casino. For players aged 18 and above only.
18+ only. Gambling can be addictive. Please play responsibly. Visit our Responsible Gaming page for help.